Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
157s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
03/01/2025, 22:23
Behavioral task
behavioral1
Sample
JaffaCakes118_7185ff85ec43f1a42fe89725720975fb.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
JaffaCakes118_7185ff85ec43f1a42fe89725720975fb.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
JaffaCakes118_7185ff85ec43f1a42fe89725720975fb.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
JaffaCakes118_7185ff85ec43f1a42fe89725720975fb.apk
-
Size
5.0MB
-
MD5
7185ff85ec43f1a42fe89725720975fb
-
SHA1
3f916ea5c07abb2308bb4e2f5391ac979998b4be
-
SHA256
de032609bda6ab2da5ccf34923eccf0024f2342795a220f5e7ce8c14ebc87e34
-
SHA512
fd184eedb6778943924b09f1f3e44fe8fd04ec15d9170144a0ae58066afbc8a075f0ff91c13e1bed1eb31aea407b20afa27cc1e543c0301b520f0cec88db34d1
-
SSDEEP
98304:9cOAB+dOZB9G1MDBBmWqMQhNgWavgu33hiUlnpxF1BonsAOAZBoeSNUSqf8SbZfz:ypB+dOZB9BDBBmWXcQ933hiq3TonsAO0
Malware Config
Signatures
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Smsfactory family
-
Checks if the Android device is rooted. 1 TTPs 3 IoCs
ioc Process /sbin/su com.halfbrick.fruitninjafree.hack /system/app/Superuser.apk com.halfbrick.fruitninjafree.hack:Metrica /sbin/su com.halfbrick.fruitninjafree.hack:Metrica -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.halfbrick.fruitninjafree.hack -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.halfbrick.fruitninjafree.hack Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.halfbrick.fruitninjafree.hack:Metrica -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.halfbrick.fruitninjafree.hack:Metrica -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.halfbrick.fruitninjafree.hack Framework service call android.app.IActivityManager.registerReceiver com.halfbrick.fruitninjafree.hack:Metrica -
Schedules tasks to execute at a specified time 1 TTPs 2 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.halfbrick.fruitninjafree.hack Framework service call android.app.job.IJobScheduler.schedule com.halfbrick.fruitninjafree.hack:Metrica -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.halfbrick.fruitninjafree.hack:Metrica Framework API call javax.crypto.Cipher.doFinal com.halfbrick.fruitninjafree.hack -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.halfbrick.fruitninjafree.hack
Processes
-
com.halfbrick.fruitninjafree.hack1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4970
-
com.halfbrick.fruitninjafree.hack:Metrica1⤵
- Checks if the Android device is rooted.
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:5016
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
MD55f95caa096ebd3fe93432163e3fd2d34
SHA148c9bba88699f9fbf625d27b189ab4395662ccc2
SHA256c17b0ff6f351266dfc375282c9ee02b8263348390207cec71835d7e0956419e3
SHA512e828b3db8d88c761426eaeb76cf836fb92a1a5063a10ae3ec75425057f7e638a17f698b4fbb8202c17ac767abc60482e7d2f702e0d340dcfa21f0a4c6380e0a2
-
Filesize
8KB
MD5b410655fbbbf5ff4e8ce661cdb9fb1ba
SHA1094a0677d588efadd4f93354bb2a774cabd3a5c2
SHA2562448e040cfadd40e70648bf93ec1513b024b1efc6b1a308abece0f979ef11e89
SHA512b9803bc7cba2b0c0c372161b64d9efaaf4a4167a22ff69de8aa6aedf49439ebd787407a3263e600e91cef565b40441f505bfbd08006168b52d98cb7c22a6a3ad
-
Filesize
512B
MD57af043bf7f5a2f9448eba8b36151f042
SHA107846beaca796ad0f6207de455ed719f54dac146
SHA2566066e123b578fabb804fb404da3ea21c5614bf7bde1d28aea9779a8eb46bfe8a
SHA512a11fd3af61a80129e3a3738cdac4cf3e76cc482d2f0766722bcf6e04f5a1a5354d69ecd4189e56c3f4b419a98c6332bc71e8caf1a56c641917ef2eafbe97cd6f
-
Filesize
44KB
MD5ca35c80833f7bdb864548866e69da79e
SHA17808ac4ab5a112eafa10715202d850b614ce11e1
SHA256ce2d49083cae493866334d8a1fded5dd2098997f08e79dc35fdba61bbf02b2c6
SHA512c9b07d9f14016163e4f91decaded5d8a319d666a044bd1ebd397aaf040982baabd32903781fd611137ef8b2b6dd5e2eb03273c27c339031ed8cfa9327cd95f27
-
Filesize
12KB
MD5f2026e7fe757fb3f23517f8e826ff3b7
SHA142ce9b32180faabcb88ecd9a7eca14011251772e
SHA25658a57b2bb7d46284d191843757d8fc1854981395c9007c6d38e5b9e0c5ae0060
SHA5125e16278d4ab3a91d2c5c89389918674ae94ab106170fe6e7c43a1ad368af6174f34238879a0b3036e66520a41ce1dab4a2d27b3bd5e906246c797d4801930900
-
Filesize
8KB
MD5a4749e55ff44d29007cf761ead744132
SHA191078cc25b35b396335b0389562d5864d3f79608
SHA2569359ba652db12b54e3decd6d8246ef3e480148912df5adea85e5187ee22ac950
SHA512f2d190bd95175c8a2b4b95fd240f864f145116f8818f723dc07dee663334f838e24412c5f7a557406b8752bbde0b28cba01d6e173f7b0f6a8e1ca02aca60f1d6
-
Filesize
226B
MD51a25c65d2b52fb747ddad6268e21a9aa
SHA16e9f0eb57af40fad78fda0c35f9cab9c626c6b51
SHA2567c374388f57b4ca2638a9fa783797bd22dc9daf6e15dd74e5d1ca0808f8fdc1c
SHA5128e8cd03ec2238c12e6031771556eea21f0a4fa8c85387ac462257f920e87f1132558d6968a1b9a01a60db1ce24c0a85e2c2bf87c2b96cae8d690eace2f4ded21
-
Filesize
12KB
MD54d3f7c6919daad8cc591d1e247508036
SHA19f683f361752fd0728409ea16b66badfa2f0a414
SHA256d267d0760b757fd41ca3fb4b47cd14c6a4859f16b90d1c855507361c96222b7c
SHA512a4046b5cd1c95ad1b8b63898c07a5cd1624aee89857ede69e0ee9f77afbc1d739196377ed5f1cf5ba223039375f0c43d8cefd5164de07a87ddce6e38b0dd412b
-
Filesize
12KB
MD56bb75ea3ed1b1ccbb6f2e77de5f3add9
SHA17f17a159c33eaeb725b0d61524fb8efff1994afc
SHA2569bb6a95d0612bdb1b964e780268294de267a0db5900cdf2b776a0a6423684a6d
SHA512a0220fa18ff11a365735d9a1e22dd5b899ae5a5d16fffceaac562a84087ded5aca9989d3c9867bb8cd2a59e02f07c194b1966391b217760843a06d5be64db626
-
Filesize
48KB
MD592736f0362de7b43777aee2609f82dec
SHA195d08a1c91b219ede7326137b548c60205067fb5
SHA2563bd3988a079788bf90d62147932d169a9b8613c4a309b4b3e213b6d82d7e31ca
SHA512d4de0e85780ea871a0d3f543cb33e9d72ba8bb934500dc6731d3860db05ad2c6abeb1ab7ccc56ec9e6e5a8cd11f5945c3dd6f8c1c7fe8f007a241b7e55b8fcba
-
Filesize
16KB
MD56465b5a70407bdfe1e8f967cd6b1322a
SHA1c4e22b0bfdb1eb073eb9d3349439219e82af320f
SHA256181c9f1375a12fe8b2df7d17ae442ab08151ddbbd0d0e8610568d8863629cbd6
SHA512736fa93dfd69e6b1cbee5403eea39499c995211df40508b06718391b86b8077e5def7e02d21f3875eb1208e36bb513d8d8b81e94edd54e020dfebc1ee60200e1
-
Filesize
108KB
MD5cd2a34b79c31e85e350975c0c839638d
SHA11bcc9a3cb5242cbc826e40d5b013572da2b7657d
SHA256aabaf32b262db0da504b25abb3f5bdc6922d1188116f5f8a3f6285d1ceb8531e
SHA51200f4ef6ed9d211e2dbb9355ef01e5f59237c061b1e8f9c156579f47a13a23bb7e0cf8fb5ea7d77440d601d6a8c9b7c5efb8787131f78571a3f3e80657ba8d1bb
-
Filesize
197KB
MD5cb167cd98c5df0dd720fb979363282ab
SHA1cfc31907f328a09953ad95d5f662f4e6f81b36a2
SHA2567926a5868ff49baf96777b0a63ebc81beb75b3859083fe3707f6df4efee9b589
SHA51273ca91f7dd64337d2a552d1c9ead22f228749acb34000c1959bb7dc15c92ab1fb6322f26010b6da0b9e4d0445f2f5ed09b1f1b997ca284fd3dde89b2549e12b0
-
Filesize
2KB
MD5449a71961824a05f0bbd538b65c96892
SHA114826df4fca7b2d5eacb793650c59a0c6917acaf
SHA25655bf45e7759e1e7c78feb534495e56dd8de88ae892f98fc2683e872cb9b27ca2
SHA512295d0361caa7af06048f3d7ed0338d78ce61e1ab3084ee92204ac5e1ff3726848e7698b869f6e5601cbd4d6e007c504a173208e49adedaf222b021e338f23a82
-
Filesize
20KB
MD55ab577fc6e652cb2626c1ba4ff33f7e3
SHA13de991156d7409e52b6f1ef18170925edf1f0dd9
SHA2569af2cb8291435b74aea9de962389cdb4aa7ae89ca8c52dae3635181e14739316
SHA512612902f2d1db245346668a4d7d5e994abe8d62deefefb4a72858f42a4c9ef932ee2ffd723e95e0a73f550548b78bbccd5bdd52bde540055627b6b6fbbabb88a1
-
/data/data/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack-journal
Filesize8KB
MD5275a6651226dc703318314adb6b19774
SHA13cd8f25bd13203a4d84f2101f4d47855e9550fe7
SHA2563071e2246f16f046c78390d61988a80a6f18f71b9cda6eae036f734c8fb1c8aa
SHA512cbe04cf1fc6b8664947a00d6c99e8b38e376e15f96ecfd798728e21c156897aeb8c3a3f52e81f7db0c3b27bf659aa51b9a5bc96012f2dad96647aa43e3ffa020
-
/data/data/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack-journal
Filesize12KB
MD5e42f48a3b79fcbb1102f766ef83e8291
SHA18d3e8fe563a9bb57274b84c4d496756b75e31233
SHA25623b76e8579fc186326f5fe9b288f7d07784de7c7ae5495887641a1856e22ff1e
SHA512cb8b6f85ebaa716bd98b575e71630ab00461a37c5a62872cd1a5b7346045d4b519f62ef79790855d554f228b6b7171ea86f0090a0d1c3302846fc8aab1eb5d5c
-
/data/data/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack-journal
Filesize269KB
MD58dc66d2121f6ea2bf06041236bf01c7b
SHA15ebb734be145d6b23cdf1cb1819148f2fd06cd9b
SHA2561be7875b6b85b6f8cad6404a16fed94d247c14cdf3f315f847ade13452adc810
SHA5128fa86a012555984886bc71624d13fa1150c91dd64bf2c6595d2b79905e1088c65a0a2a162e4ef84c3a314ea2671337ace92f9d1a7e034c6b27d1536d87eb6308
-
/data/data/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180
Filesize36KB
MD556aa18fbf7936f47f89060a0b37c94f1
SHA1c6a6b3d67760a1b4684e4e7df99123ad7a3e77d2
SHA256c7fa34265ce7a5681bb30d1cec167e2ae8ed86ea7a3a37ecac0f218a35c0e263
SHA51272e821e80025a25388af104865f9d86b2ab1ea0142b495ae369e6a8cbce3ea10fbcecdcce0d9a4e9d562ab1194080df56d1505d7bdbac952b93d8c67663d1095
-
/data/data/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5e8215a28898182dbb7474daef90af92c
SHA185a70abbb9360e05fe2116da2c45b81688ff5332
SHA256080c2626848a490039f206dfe295d0338adf6105ed9db93dace5efd18e64b379
SHA51229b19bceef0ffade9fd7fe83b5337f02550e22fc33ce556e46472ff993b9d476f22704d21eebbadad84b41371cb642b8cd9cd5a10914c87e633cb3b961597aad
-
/data/data/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize20KB
MD5fe0da024f06de316629f3dfa8c6ca43e
SHA14447788a024f598626fa4f8486d9251caf2d23c0
SHA256ed6565b05061de0993d1cfdde6462ab1be51fcb5e2653a21a6540cc0f646ef3e
SHA512f1586c65b35fa1bc0e68c0cd24527cd38b7006840ec608e7b89d89b903c29adc127daeb0edc8815960113d4a6f5f4b46d848014158c5b79b41b4bcd66370e657
-
/data/data/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD55fa10f58bb51aa4c3acc8c3d6d413cc2
SHA13e2d8c1e1f2bede2b3ee5c928abc09e233aed960
SHA256e25c3f9bfd5f16baeca4d954a1a1b191dbde0d5df0451cddf5e64e4a41edefdb
SHA5125feebaa7ed22880a3f4e9e53683adc9b28e9e86aabe7baf074323310ee268b415c4d8ed1b824487cd18113c5a9e07cca424d58ff62a7d392f37ecef81116a01e
-
/data/data/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize8KB
MD5bd1e771a8128db6ea521673c053e86ba
SHA1a37c2831705fb8efe3fca6f12217535fd4911344
SHA2567d2d6a917687ed35bc2297c6bab110642cb7f8b2b658fd61c8c888be769c7bfb
SHA51262053d4975d4e08f39072fc90082a050d6e156b0be3b8d7647931fab1d5547cf4458b686278881bf82d01ba5bdd0b5218e6753efca886badf58f5a9550947928
-
/data/data/com.halfbrick.fruitninjafree.hack/no_backup/db_metrica_com.halfbrick.fruitninjafree.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD570cc46b8a90083c09680bec80798ab8d
SHA1663157a32baa6ec06eaa1322256fbd00deaced0c
SHA2565294ce01fa146c21a5af8cc2259d6ef9edec0a96f6d8cc860f07679d4dc42665
SHA512cb5e3a50c9b082265a99b1f8423af7463530cdefb24c242cb85f830677b87eb914822a0e36491f34081d4b6f819bb735cbe32ba945c3f86a37cb74b9234a52d2
-
Filesize
20KB
MD51e405b94c472b1e89a84f1acb2aa8c60
SHA1b11cc37ca0f3260433bcbe2375cde68155b57b45
SHA256a6a865dacbeb03fe850a3e8a9ef7b7f2a49a01b9c766fd314f0945325e9aeb78
SHA51222452206aa36db53fb4c58e67371065a713aee711fc91ce926d7c6b6b552b661559ec2b91335a8404a16ece37f8ee60c60273ca3cd66de38db08a128aa940628
-
Filesize
116KB
MD56de88f43043837f7e8b5080b1c609f7b
SHA11fd1fad968f5d39389d9e3590a9b28fa02cf74a5
SHA256ddba4ed70eb9b303d4085e348ef2f003e05d825aabac1165fe27c0995526d66c
SHA5128d23e50f844c5e4cee7c0b1659e8bf2ca29437cdba1153e827d306233f329a0029946a4aae689c289e16c9fa9d52a82dc52b29688ba4beb0c986454f70b38d3a
-
Filesize
20KB
MD5a0a548793a510f9caed081689f935eeb
SHA12d1aad0213b2b86bfe52dd2485741fb00eb02f3a
SHA2564564ec31a51694e8349f462d5ada137b3f37b7c42515a7fe34ea8ef33b5063c5
SHA512624204c5e505d3f2822a9761109babe81079ce8552551f23b7315baa171ef7881e5b5c4eab607a53b9bf080be6cb3100ff8cedf4cc86fa6218cd18301fcdc367
-
Filesize
20KB
MD59572c85fe91c15106d1d811554f45ce8
SHA10fd22194f6c46f8316b14c9cd9e982bf0ae7aa00
SHA25628ca53d5e7da2cec66fd23e722b28a86e116f7cf782243a9f9130974ad5fc5bf
SHA5124d29ee45c84154dbb92914b1ae2d98a4fa6ffcae37bd2d99bcfca3f7c5a1df79d43f2bbc26102b43bb6c98aec8faab797d12421b1d85772561afeb26a35e5527
-
Filesize
12KB
MD5ed4fb76218174b66cf38e86b56cdd393
SHA1362af49fd60b3ffab6c5bef5d6eb54ceca2483e1
SHA256ef5cad0facf2fa34898809f607785ced2585c41e46facf31ed41f1a722c27af4
SHA512022ee5dc9951bee3f7983ca33f303667fa6a33e40e13d6b5c93a4350b2d6a8a31f5925235ed7b963ea4a81fc072992e1b762b7b49730a3cbaf4389cb8306678d
-
Filesize
512B
MD585f1dd6bc711dd492cd5a2cbece15f52
SHA1ced8b3ae373cc79c3497f96cedb1d0fecfabce10
SHA256921469089f08cc9cf572166f73619c2d419c34fa66ff94f1d4036545dd8b4e34
SHA512110e7e71f1e9afc8fd898894edf689e511568e9afb435dfd66e6f7acd1f95688accfa976b6c805b5f81572e374ef844570f992ef8515378e24e3e99e8d0bfbb5
-
Filesize
12KB
MD5e82aa1ccf35d4373667d576f80a0ad2f
SHA1018a4ee6899bf076bf4823417416698d0164d642
SHA25633530548ce75dc6593e4d304c662cf45987527bb03efba23496945f875178135
SHA51208d6e68445f6ad0ad5a300fb0c103fd40b67673bc7cd2a431903487941d689b909cfcaf89240baef4d34dccbca442a070acba5040c1bf8e87e715b07527e3f95
-
Filesize
12KB
MD53f888cc30ef1d6daefe03c6380ff73b7
SHA18a34624abf6297304ccf94f732ade0fc984a9548
SHA256a84979a3b3a4035967358e3dd363fbb7ef83c154af17ce566dc341ab9b574d0c
SHA51202a2647c870780ef3404fc73473544319b92db56b5c7bc60ae1cadb6966233694881c61b4b982575b98d7934edbf69e357cf223329b3b91324706324f8a29832
-
Filesize
20KB
MD501ea96cca3809414e4aae8b22bb9b5fa
SHA16c50bd608dfc4cdad65b47c81cc862f2e673ce38
SHA2565b2e5f20edbb9d568c3efaa503c2fbef56e740b4109072e34fa92c51a5a66662
SHA5125680e2b798b5e1fafe3f62f2511a370a41b5960cfe185b1739695c2ff2c7f666c8cf6aeb1f7c8bf243a8a1bf16e7d507b6fd2ce668fe7b8fbeaf3fbbedb40af6
-
Filesize
12KB
MD505166e3cf3342a687b6903445b867465
SHA1e2f8e603a0146aa954779aa52c08fa194ddb643c
SHA256a4c4abe9cc63dd01fb4ea0e5ba915458b613dbdf891c0c09871859c9d5f3da23
SHA512ad9ec6e4cd63f383d49760c27348841742c291c2a2617f3d7e9ee802b7b0ff53fd8318438f655a49971a9e4ca9b8807bf21ac98900b0fa0a0bf37073b2022c4d